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The invention relates to a method of generating authentication data for a 
physical object, and a method of authenticating a physical object. The invention further 
relates to an authentication system. 

Authentication of physical objects can be used for many applications, such as 
conditional access to secure buildings or conditional access to digital data (e.g. stored in a 
computer or removable storage media), or for identification purposes (e.g. used for charging 
the identified person for a particular activity). Biometrical authentication is well-known. In 
such systems, biometrical properties of a human (the physical object) are read using a 
suitable reader, such as a fingerprint scanner or iris seamier. The properties are compared to 
reference data. If a match occurs the human is identified or can be granted access. The 
reference data for the user has been obtained earlier in an enrolment phase and is stored 
securely, e.g. in a secure database or smart-card 

The physical object to be authenticated may also be non-human. For example, 
the object may be a storage medium like a CD, DVD, solid-state memory containing 
protected digital content. The content itself may be stored in an encrypted form as a measure 
against unauthorized rendering and/or copying. An authentic storage medium typically 
includes measurable properties that enable a rendering/copying apparatus to obtain the 
necessary decryption key, preferably in such a way that unauthorized playback apparatuses 
cannot obtain these keys. Typically the properties are not stored as regular data, since this 
would make it possible to make an illegal one-to-one copy of the protected content and the 
properties. Such a copy could then not be distinguished from the original and would be seen 
as authentic. Instead, the properties are at least partly hidden in the medium itself, rather than 
by storing it as data on the storage medium. The properties are obtained from the storage 
medium as variations in a physical parameter of the storage medium. For optical discs, one 
way of doing this is through the use of a so-called "wobble". Different media will have a 
different wobble or no wobble at all, so the outcome of the authentication will not yield the 
decryption key that is required for decrypting the content Reference is made to US patent 
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5,724,327 (attorney docke, PHN 13922) to the 8ame assignee as the present invention which 
describes various techniques to create such a "wobble" and to store information in it The 
wobble is an example of a Physical Uncloneable Function (PUF). 

Typically, the authentication protocols convert the properties 
1 crypfographicafly into a protected control value. The generator, conttol value is compared to a 
stored reference conttoj value. The reference data is, for example, stored at a centra! server at 
work, fn a bank, or in a nightclub where only member* have access, or at many other 
locations where a user has conditional aceess or needs to be identified. As biometrics are 
unioue identifiers of hmnanbeings, privacy problems may arise. Peopfe feel uncomfortable 
wrth supplying men biometrical information to a large number of seemingly secure 
databases. Practice has shown ma, the biometrical information may become available through 

system. In particular during the enrolment, the unprotected biometrical da* is available If 
tte tnformation is available a, many locations, the chance of misuse increases. It should also 
be recalled mat biometrical date is a good representation of the identity of the user. •Stealing- 
some or most of the biometrical data of a person (possibly by breaking only one 
tmplementation) can be seen as an electionic equivalent of stealing thepctson-s identity. The 
Stolen date may make it relatively easy to gain access to many otter systems protected by 
biometrical date. Thus, the "identity theft" using the biometrie information can have much 
more serious implications than the "simple" theft of a credit card. Whereas h is relatively 
easy to revoke a credit card, it is much more complicated to revoke one's biometrical 
tdentity. A further problem of using some biometric information (in particular retina scan) is 
that tt can reveaf illness patterns and is therefore very vulnerable to misuse. Some of these 
problems are also pertinent to authentication of physical objects other than based on 

venfiec by reading properties of the card. If the card fs successful and is used for many 
applications, revocation of the card becomes cumbereome. 

Many authentication protocols use a one-way function, such as a hash, that 
reduces tte amount of data that needs to be stored in the reference contml value The 
conventional one-way functions are very sensitive to srnal! perturbations in fheir inputs 
Therefore, ehose cryptographic primitives can not be applied straightforwardly when the 
mpu, data is noisy. This is typically the case when tte input data is obtained from the 
measurement of physical objects such as biometrics, PUFs, etc. 



PHNL030552EPP 



3 07.05.2003 



WO 02/078249 describes an authentication method that operates directly on 
the measured properties, ie. with vectors in an n-dimensional Euclidian space. Unspecified 

features, say X x X, e R, are extracted and the means ft, and the variances of of each 

feature X„i = l,...,s are estimated. Further, a real number r e (0,1) is selected and the 

codebook B = {(w } w,): w t =r<r t k, i = l,...,s;k t g Z}is formed. At the next step, a 

random vector <?=($,...,^)is selected, so that c^,...,^), with c, = a - $ , is a valid 
code word from the code B. Finally, h(c) - the hashed version of c, and 8 are stored. 
Authentication consists of selection of a codeword c': c f = argmin^B ||jc'- 6-c\\, and 
comparing the hashed version of c' : h (</) , with the stored value of h(c) . In other words, the 
input feature X t is shifted by a random number S t , and the value is quantized to the nearest 
point from a lattice with step size ra t . In this approach, the offset,? and the hashed version of 
the code word c 0 are publicly available (or, they become available if the database is 
compromised). One may assume that the attacker is in principle able to invert the hash 
function, and obtain the code word c 0 , hence giving the attacker access to the identity x 0 . 
Moreover, this scheme is unreliable. The probability of authenticating correctly an s- 
dimensional feature vector measured on an honest user is less than 2~* , which is too low for 
practical purposes. 



It is an object of the invention to provide an improved method and system for 
authentication based on properties of a physical object. 

To meet the object of the invention, a method of generating authentication data 
for authenticating a physical object includes: 

measuring a property set Y of the object using a measurement procedure; 

creating a property set / from the measured property set Y that meet a 
predetermined robustness criterion; 

creating a property set A from the property set I that includes less information 
on the actual properties than property set Y\ 

generating a control value Fin dependence on properties of the property set A 
and inserting the control value in the authentication data. 
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The method according to the invention, acts directly on the measured 
properties without mapping the properties to codebook values. The measured properties must 
be quantized into discrete values before they can be processed cryptographically. As 
measurement properties contain noise, the outcome of the quantization may differ from 
experiment to experiment. In particular if a physical parameter takes on a value close to a 
quantization threshold, minor amounts of noise can change the outcome. After applying a 
cryptographic function to the quantized data, minor changes will be magnified and the 
outcome will bear no resemblance to the expected outcome. This is fundamentally a 
necessary property of cryptographic functions. To reduce the risk of acting on unreliable 
properties, first a set of robust properties is created from the measured set. The robust set may 
include properties with a high signal to noise ratio. The amount of information in the robust 
property set is then reduced. The reduced property set forms the basis of the control value 
used for the authentication. Breaking the control value would only reveal the reduced set of 
information. The robust property set will still include information not yet revealed. This 
unrevealed information can be used for other authentication applications, even if these 
application are also based on data that has already been revealed. 

According to the measure of the dependent claim 2, a contracting 
transformation is performed. The contracting transformation converts predetermined input 
values to corresponding output values. It also converts arbitrary input values that sufficiently 
resemble one of the predetermined input values to the same corresponding output value. On 
the other hand, substantially different input values are converted to different output values. 
An example of such a contracting transformation is a delta-contracting function that has a 
primary input (the cryptographic data), a secondary input (the helper data) and generates 
output based on the primary and secondary inputs. The secondary input is a control input that 
defines ranges of values (e.g. within a predetermined distance of a target input value using a 
predetermined distance measure) for the primary input signal and the corresponding output 
value for each range of primary input values. The contracting transformation increases the 
robustness further, since a property of the physical object is always converted to the same 
output value as long as the property is only affected by a limited amount of noise so that it 
still falls within the same input value range. Moreover, it reduces the information. From the 
output it is not directly possible to conclude what the input was. 

As described in the measure of the dependent claim 3, the contracting 
transformation transforms a property with more than two possible values (typically at least 
eight bit values) to a binary number representative of a sign of the property. The sign can 
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either be positive or negative. A positive value may be represented as a digital '0' and the 
negative value as a digital '1 ' or vice versa. Zero-valued properties should normally not 
occur in the robust set. 

As described in the measure of the dependent claim 4, the step of creating the 
property set A includes selecting a subset of the property set /. Selecting a subset is also an 
effective way of reducing the amount of information. As described in the measure of the 
dependent claim 5, the subset selection is preferably steered by helper data W. For example, 
the helper data may specify which properties to use and which not to use. The helper data W 
is inserted in the authentication data using during the actual authentication. Preferably, the 
helper data W is unique for an authentication application. By using a different selection 
process for each application, breaking of the subset used for one application leaves the other 
applications unaffected (at least for as long as a sufficient amount of data is not yet revealed). 

As described in the measure of the dependent claim 7, the creation of robust 
properties uses a predetermined robustness criterion based on a signal to noise ratio of the 
measured properties. The step of creating the property set / includes performing a 
transformation Ton the property set Y to create disjunct property sets h and h where a signal 
to noise ratio of properties of h are estimated to be higher than a signal to noise ratio of 
properties of J 2 ; and using h as the property set /. The criterion may be based on statistical 
properties of the measurement procedure so that statistically reliable properties can be 
extracted. The criterion may also be adapted until the property set I x includes the desired 
number of properties. 

Preferably, the transformation T is a linear transformation that converts a 
vector representing the property set Y to a vector with components a» representing the set /, 
where each vector component en is independent of the other vector components oj i) and 
wherein the vector components are sorted according to an estimated signal to noise ratio. 
This is an effective way of obtaining the desired number of independent robust properties. 
Suitable transformations may be based on principal component analysis or Fisher's 
discriminant transformation. 

As described in the measure of the dependent claim 10, the statistical property 
that may be used for the transformation includes a covariance matrix derived from estimated 
properties AT of the object and a corresponding statistical distribution F. 

As described in the measure of the dependent claim 1 1, created properties with 
an absolute value larger than the threshold are used for the set In the others being not used 
any further. The threshold is derived from a noise level in the measured property set. 
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As described in the measure of the dependent claim 12, now that a robust and 
reduced set of properties has been created the control value Vis created by performing a 
cryptographic function on the properties. By not revealing the properties itself but only a 
cryptographic representation of it, detection of the information is more difficult. The 
cryptographic function is preferably a one-way function, such as a one-way hash. 

These and other aspects of the invention are apparent from and will be 
elucidated with reference to the embodiments described hereinafter. 



10 In the drawings: 

Fig. 1 shows a block diagram of the authentication system according to the 

invention; and 

Fig.2 shows the major processing steps in a preferred embodiment. 

15 

Fig.l shows a block diagram of the system 100 according to the invention. The 
system includes an enrolment device 1 10 that generates authentication data and stores it in a 
storage 130. To this end, the enrolment device includes an input 1 12 for receiving properties 
measured from a physical object 105. The properties are measured using a suitable measuring 

20 device 120 that may be incorporated into the enrolment device. The physical object may be a 
human. Shown is that a fingerprint 105 is measured from a human. Also other biometrical 
data may be measured, such as scanning an iris. These techniques are in itself known and will 
not be described any further. The object may also be non-human. For example, the object 
may be an electronic identification card. In particular, the object may be a data carrier, such 

25 as a carrier of digital audio/video content (e.g. CD). In such a case the object 105 may be 
combined with the storage 130, i.e. the object also carries the authentication data. If the 
object is a storage medium object, the properties may be variations in a physical parameter of 
the storage medium. Those variations may have been made intentionally, specific for each 
object, or may be random. As long as the variations are sufficiently unique for the object they 

30 can be used for the authentication. Irrespective of the physical object, it is assumed that for 
the physical object a plurality of properties are measured. In principle, the properties are 
'analogue', each quantized to a multi-bit value. Typically, at least 8-bit property values will 
be used. The enrolment device includes a processor 1 14 for generating the authentication 
data. The processor may be any suitable processor, such as for example used in a personal 
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computer. Typically, a general purpose processor is used operated under control of a suitable 
program. The program may be stored in a non-volatile memory. Since the enrolment device 
creates authentication data that preferably can not easily be broken it is preferred to take 
some security steps. For example, the enrolment device may be placed in a secure 
environment or parts of the processing steps may be executed in a secure module, such as a 
tamper proof cryptographic module. The authentication data is stored in the storage 130 via 
output 116. 

The system further includes at least one authentication device 140. The 
authentication may in principle be done using the same apparatus as used for the enrolment. 
In such a case, the enrolment device and authentication device arethe same. In the 
description it will be assumed that both devices are separate to clarify the differences 
between enrolment and authentication. The enrolment device includes an input 142 for 
receiving properties measured from the physical object 105. The properties are measured 
using a suitable measuring device 170 that may be incorporated into the authentication 
device. Preferably, the measurement devices 120 and 170 are of a similar design. The same 
physical object is measured as for which the authentication data has been created by the 
authentication device 1 10. The authentication device includes a processor 144 for comparing 
the object properties against the authentication data. The processor may be any suitable 
processor, such as for example used in a personal computer. Typically, a general purpose 
processor is used operated under control of a suitable program. The program may be stored in 
a non-volatile memory. The input of the authentication device is also used for receiving the 
authentication data from the storage 130. It will be appreciated that the enrolment device, 
storage, and authentication device may be physically far removed. If so, suitable 
communication means may be used for exchanging the authentication data. The storage 130 
may also be incorporated into the enrolment device. 

In the description, the term authentication is used in a broad meaning. The 
described technique can be used for verifying that the physical object is authentic, i.e. 
genuine, but can also be used for establishing an identity of the object, or any other suitable 
person. The outcome of the described method and system is a control value. This control 
value can be used for any purpose. For example, if during authentication a match occurs this 
may trigger an action, like giving a person entrance to a building or a computer. Equally well, 
data that has been stored in correspondence with the control value may be loaded. This may, 
for example, be any form of identification, like the name of the person, but this may equally 
well be an identification number. Even a bank account number may be retrieved, giving the 
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authenticated person access to the account. All such variations fall within the skills of a 
skilled person and will not be described in more detail here. The description will focus on • 
authentication (including identification) of a human using biometrics. It will be appreciated 
that the same technique can be used for many other purposes as well, that have in common 
5 the authentication of properties measured from a physical object. 

The protocol for the authentication of physical objects according to the 
invention is designed to satisfy the following three requirements: 

(i) Robustness to noise 

Intrinsically, the measurements will be corrupted by noise since it involves 
10 biometrics or physical measurements. The authentication scheme is designed to be 

robust to small noise, i.e., if the system is presented with the measurement X +e , 
where is the "true" template, and e is the measurement noise, the system 
should be able to answer positively to the request whether the measurement X+ e 
belongs to the person or the object, which it claims it is. This requirement will be 
15 referred to by the term noise-contracting. 

(ii) Security 

There are various security considerations in the development of the authentication 
protocol. Firstly, it should be sufficiently difficult for the attacker to impersonate 
another person without access to a template. Secondly, the attacker should not be 

20 able to deduce any information about the template or the secret from the 

information he gets from the server. In the remainder, the authentication scheme is 
said to be 0-revealing, if the attacker cannot extract any information about the 
secret from the information he receives, and said to be E-revealing, if the 
information the attacker gets, is negligible compared to the information he has to 

25 guess. Thirdly, one has to consider protection against "eaves-dropping", i.e., the 

possibility that the communication channel which carries the coded secret might 
be observed by an attacker. This third security threat can be eliminated by 
standard methods like Zero-Knowledge protocol and will not be described here in 
much detail. 

30 (hi) Privacy. 

By privacy is meant, that even in the case the secure database storing the control 
value is compromised, and the secret of 'Alice' (the person's whose identity is 
stored in the representation of a control value) becomes known to the attacker, the 
attacker would in principle be able to authenticate himself as Alice in this 
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particular application, but he would not be able to authenticate himself as Alice in 
any other application, which relies on the same biometric template. In other 
words, by breaking into this database, the attacker will learn a particular secret 
generated for Alice using her biometric template, but he would not learn the 
template itself. Hence, he would not be able to produce other secrets which are 
generated using Alice's template. But more importantly, sensitive information 
which can be deduced from a template, like the presence of certain diseases from 
the retina-scan, is not revealed. 

Enrolment performed by the enrolment device: 

During this phase the person or physical object has to visit the enrolment 
device, e.g. located at a Certification Authority (CA). The properties of the object/person are 
measured, processed and stored as reference data V for later use together with any helper 
data W that may have been used to steer the processing. Preferably, the helper data is 
determined by the properties of X . In an on-line application, these data can be stored in a 
central database or these data can be certified by a digital signature of the CA and be given to 
the service provider. 

In short, the enrolment device according the invention performs the following 

steps: 

(1) Get measurements, giving a property set Y 

(2) Create robust properties from the property set Y, giving a set of robust properties / 

(3) Reduce the information in property set I, giving a property set A 

(4) Generate a control value Abased on property set A 

(5) Store Vmd any helper data Wthat may have been used to steer the processing 

As will be described below, steps 2 and 3 can be seen as a signal processing 
function G operating on the property set T, under control of the helper data W y giving as 
output G(Y y W). This forms the property set .4. The signal processing may show steps 2 and 3 
as separate sequential processing steps (illustrated below in two embodiments) but can also 
be performed in one integrated processing step (shown below for one embodiment). The 
helper data PFmay steer both steps 2 and 3. For authentication, typically steps 2 and 3 can be 
performed in one operation, since Wis already known. 

The control value Vmxy simply be the property set A. In order to protect the 
communication line between the enrolment device, storage, and authentication device, in a 
preferred embodiment, creating the control value V includes performing a cryptographic 
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function on properties of the property set A. Preferably, the cryptographic function is a 
homomorphic one-way function. A suitable hash is the function. 

r k-> r 2 mod n 9 m i-> g nnnr mod n 2 for a randomly chosen reZ n and g being the generator of a 
subgroup (Paillier encryption function). The encrypted secret derived from the biometric 
measurements are then stored at the database. These homomorphic one-way functions allow 
to set-up a Zero-Knowledge protocol for checking the knowledge of the template without 
revealing any information. As the communication during Zero-Knowledge protocols 
preferably changes every session, the communication line is better protected. 

Authentication performed by the authentication device 

This authentication protocol consists of a measurement apparatus that extracts 
analog measurement data Y from a physical object- These analog data are then processed 
through a signal processing function G(Y,W) , making use of the auxiliary data W \ and 
finally protected by applying a collision resistant one-way hash function h to it. It is 
important to choose the function G appropriately. More precisely the protocol performs the 
following steps. 

(1) Get V and any helper data W that may have been used to steer the processing 

(2) Get measurements, giving a property set Y 

(3) Create robust properties from the property set Y, giving a set of robust properties / 

(4) Reduce the information in property set I, giving a property set A 

(5) Generate a control value V* based on property set A 

(6) Compare V' against V: if there is a match, the object has been authenticated 

Note: the helper data (if any) is used in an analogous way to steer the 
processing as done during the enrolment. For authentication, typically steps 2 and 3 can be 
performed in one operation, since it is already known from the enrolment which properties 
are robust (described by helper data W) 9 so in many embodiments it will be possible to 
perform step 4 on only selected properties without explicitly creating the smaller set. 

Measurements 

A suitable measurement procedure is used to obtain a property set 7 of the 
physical object to be authenticated (or enrolled), represented as an n-dimensional vector with 
measurements Y = (Y 19 ... t Y n )e R n of certain actual corresponding properties (such as 

biometrics) X = [X x , X n ) of the object. Since the measuring always introduces noise, the 
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measurement vector 7 = (7„. ..,7„) consists of a true signal X = (*„..., JT„) and a corrupting 

noised = (E l ,...,E„) . In the description, vectors will be used. It will be appreciated that any 
multi-dimensional array of numbers (measurements) can be easily converted to a vector (e.g. 
by concatenating the columns to one vector). As will be described in more detail below, in a 
5 preferred embodiment a control value is created on vector with fewer components. For the 
control value to be reasonable secure, it is desired that the subset includes a number of bits 
typically used in ciphers, such as 56 bits for DES or 128 bits for AES. Y should in this 
preferred embodiment include more components, for example twice as many. The length of 7 
may depend on the noise level and the amount of information present in the measurements 

10 (e.g. more noise, implies a need for more measurements). 

As will be described below, the signal processing of two preferred 
embodiment is based on statistical properties of the signal X and/or noise E. These statistical 
properties may be estimated in any suitable way, for example by taking the measurements a 
number of times during the enrolment and then estimate the statistical properties using a 

15 suitable statistical estimation well-known to persons skilled in the art. 

Creating a robust set of properties 

From the measured property set 7 a property set 7 is created that meets a 
predetermined robustness criterion. Preferably, the predetermined robustness criterion is 

20 based on a signal to noise ratio of the measured properties. The property set 7is used to 

create two disjunct property sets h and 7 2 where a signal to noise ratio of properties of /, are 
estimated to be higher than a signal to noise ratio of properties of 7 2 . h is then used as the 
property set 7. In the following, three alternative embodiments will be described for creating 
the robust set of properties. The embodiments according to the invention provide robustness 

25 to measurement errors without using error-correcting codes. 

First embodiment 

For the robust properties of set Ij are selected those properties of 7 with 
sufficiently large absolute values. Sufficiently large means that the contribution of X, to 7, is 
30 expected to be larger than the contribution of E h so a signal to noise (S/N) ratio of at least 1. 
By performing several measurements during the enrolment a good statistical estimation of the 
noise values E, can be obtained. Preferably, only properties of 7, that clearly exceed this 
estimate (e.g. S/N > 3) are used as being robust, i.e. assigned to set Ij. If the noise level of the 
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measurement procedure is known it is not required to perform several measurements to 
obtain such an estimate. 



Second and third embodiment 
5 In these two embodiments, the property set l is created by performing a 

transformation Fon the property set Y to create the two disjunct property sets I{ and 1% where 
a signal to noise ratio of properties of I\ are estimated to be higher than a signal to noise ratio 
of properties of h. The transformation /depends on a statistical property of the measurement 
procedure. Preferably, the statistical property includes a co variance matrix derived from 

10 estimated properties Xof the object and a corresponding statistical distribution F. 

Advantageously, the transformation r is a linear transformation that converts a vector 
representing the property set Y to a vector with components <Xi representing the set /, where 
each vector component oti is independent of the other vector components Oj (j &i) and wherein 
the vector components are sorted according to an estimated signal to noise ratio. The 

15 threshold for assigning properties to the set Ij (or li) is preferably derived from a noise level 
in the measured property set Y. The transformation r will be described for two embodiments 
(second and third embodiment) based on above principles. The first embodiment uses 
Principal component analysis; the second the other one on Fisher's transformation. 

20 Second embodiment - Principal component analysis. 

Suppose the n-dimensional vector X = (X,,...,X„) has a distribution F . Let 

Ebe the corresponding covariance matrix ^= (ov r )" , 

where cr^-E [X t Xj )-E(X i )E [X s ) (in this formula E is the expectation), 
r is the orthonormal matrix, consisting of the eigenvectors of E, i.e., 
25 r*Er = A = diag(\>.„,X n ) , where without loss of generality it can be assumed that 
4 >0. 

The i -th column of T, y f is the eigenvector of 2 with the corresponding eigenvalue ^ . Let 
m = E(X) be the mean of X , then every X can be represented as X = m + Ta 
where a = {a x , a n ) is the vector with a t = ( X - m, y i ) 
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a, is called the i-th principal component of X . Therefore, for a random vector^ a new 

random vector a is constructed. The distribution of a can be given for the case that X has a 
Gaussian distribution, ie. X ~ N{mX) . Then, the following holds 

= 0; 

= 4; 

(c) cov (a l ,a J )=E(a l a J ) = 0 for i * y ; 
(rf)7r (Z) = 2^,det(2) = n," =1 4- 

Using a well known fact that uncorrected Gaussian random variables are also independent, it 
can be concluded that a„ are independent, and a, ~ iV(0,^) . 

Third embodiment - Fisher's discriminant transformation. 

Assuming that has a distribution F with mean m and covariance matrix 2^. , 
and that E has distribution G with mean 0 and covariance matrix X 0 , which is assumed to be 
positive definite. Let The a matrix, consisting of the eigenvectors ofS" 1 ^, ie., 
Z£X p r = AT=diag(/l 1 ,...,/l n )r. The eigenvalues of equal the eigenvalues 
of S^'^S" 1 ' 2 . Hence, ^ >0for all r* = l,...,«and without loss of generality it can be 
assumed that \ 2> ... £ \ £ 0 . The i-th column of T, ft is the eigenvector of JgZ p with the 

corresponding eigenvalue \. Using T define a={oc l a„) to be the vector 

with a f =(Y-m,%). Therefore, for a random vector Y a new random vector a is 
constructed. 

Supposing that both X and E have a Gaussian distribution, Le. 
X ~ ^(m,^ ) and £ - #(0, 2 G ) , where S > 0, and X and E are independent, then it can be 
proven that a ~ N (0, A+/) in the following way. That a is normally distributed with mean 
zero is obvious. To verify its covariance, first observe that V = S" 1/2 f , where f is an 
orthogonal matrix with the eigenvectors of ^ n Z F S^ in . Thus, 
VAR(a)=r(?. G +?, p )T 

=f*f+f*s- 1/2 f 

=/+A 
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where the last step uses the orthogonality of f and the fact that the eigenvalues of 
7£ n I, F T£ n are equal to the eigenvalues of . This proves the assertion about the 
covariance matrix of a . 

Fisher's Discriminant Transformation is very similar in spirit to the Principal 
Component Transformation. However, in the case the noise is colored, Le., the covariance 
matrix of the noise is not a multiple of the identity, the Fisher discriminant transformation 
can provide superior performance. 

Determining subset // for the second and third embodiment 

In the remainder, it is assumed that the biometric data Jfhave zero mean 
(which can always be achieved by subtracting m). After applying one of the transformations 
described above, a random vector a = IT is obtained. Components of a are centered and 
uncorrelated. Furthermore, under the normality assumptions of the previous section, a has a 
normal distribution, with a diagonal covariance matrix. It means that components a*, i=l, 
are independent. A., will be used to indicate the variance of a,. 

It is recalled that a threshold is derived from a noise level in the measured 
property set and that the subset h is created by assigning created properties a, with an 
absolute value larger than the threshold to set Ij. Sis a small positive number, chosen 
appropriately depending on the noise level. The subset i> is now formed by the significant 
components: /, =T s (a)={i = l,...,n:\oc,\>S}. One of the most important parameters to 
choose with respect to robustness to noise is the parameter*? . In each particular case S 
should be chosen based on the properties of noise. In the case that the noise has a Normal 
distabutionW(0,cr w 2 /£/) , where Id is the identity matrix, 5 has to be chosen depending 
on a N , For instance, for the Principal Component Transformation, S = 3cr N or S = So ■„ will be 

sufficient to insure correct identification of one bit with probability 99.87% and 99.99997% 
respectively. 

In the following it will be shown that with a large probability the 
transformation will give a sufficient number of significant components. For each i denote by 
p t -P(fa\>6). 

i 2 
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Note that the following estimate of q t is trivial- g < \—8 

\U\cc\>6 

Note that z,,i = l,...,n, are independent Bernoulli random variables, with 
P(z,=l)=p„ P(z l =0)=l-p i =q ( 

In order for the authentication scheme to be versatile, one has to ensure a large number of 

significant components, or in other words, the sum ^z, 

/=i 

must be large with a large probability. Note that its expected value is given by 

E \1L Z ' )=!>* (0.1) 

V=i J «=< fei 

It is natural to assume that there is a substantial number of components with 
variance larger than cS\c > 1 . Suppose that the fraction of such components is at least p . 
Note that if the number of components with variance substantially large than S 2 is small, 
then the whole problem of authentication of physical objects with such properties becomes 
infeasible. There should be a sufficient amount of "energy" to distinguish various 
measurements. If there is not enough energy in the signal, the noise will dorninate. This will 
make robust authentication impossible. 

Continuing the estimate (1.1), one obtains ^|>, j^ 1 *' " =S * *CH^-^- j 

Hence it can be concluded that if there is a substantial fraction of components with large 
variance, then the expected value of the sum we are interested in, will be at least a large 
fraction of the number of such components. In other words, not many components are lost. 
We estimate the probability of the event that the sum S,z,is small, ie. that it is substantially 
smaller than the expected value. In this case, one expects that such event is improbable, and 
more precisely, that its probability becomes exponentially small. 

Let k be an integer smaller than Eft^z, ) and consider the probability p|jr z , Z k 
A classical Bernstein exponential inequality can be applied to derive an upper bound. 
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Let Yi, .... Y„ be independent random variables, such that <>M, E(Y t ) = 0 then for every 



t>0 it can be proven that P 



( 



i=l 



2exp 



2.Mt 



2b* + 



3 ) 



, where b 2 „ ^E^f 



Let Y t = z, -E(z f ),i =l,...,n. Then ^j^max^-^,/?,.)^!, and 
E(Y?) =E(z, -E(z t )f = var (z,) = p t (l- Pi ) =p ( q, . 

p(±z l <k)=p(±z i -E(±z i )<k-E(±z,]\=p(±Y l 
\ -=i J \ '=» J \ '=» J J \ '=« 

Let £(X/=i^) = X"=iA =K, i w ' /c = /r 2 », with A^<Ki. 



where T = X£i/W,/«- 



= 2exp 



6r + 2(^q -k^) 



2 \ 

n 



[« ^ / 3*0 04 ^ 

2^z 2 <0.2w j=expl """ 6 » 0 25 + 2^0 2 ^ H ex P(~ 0 - 063 ")- 



Example: /q = 0.4tt, k 2 = 0.05w : 



P | Y,z, £ 0.2w j= exp [ - 3 * 0.1225 — , Q 1? n 

|^tf ' J A 6*0.25+2*0.35 J FV ' 



15 Reduce the information 

Starting from a set I\ of robust features, represented by vector a, the amount of 
information is reduced by performing a contracting transformation. In principle any suitable 
contracting transformation may be used. Least revealing is the use of only one-bit 
representations. This can, advantageously, be achieved by using a contracting transformation 
20 that transforms a property (i.e. component) of a to a binary number representative of a sign of 



the component. A suitable transformation is the Heaviside function: H (/) 



_ |0,*<0, 
jl,*>0. 



Additionally or alternatively, the information can be reduced by only selecting a subset of the 
property set Ij. The selection that is made during the enrolment can be described by helper 
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data W. This helper data is then stored as part of the authentication data and used during 
authentication to achieve the selection of the same subset at that moment. Preferably, for 
different applications different, unique helper data W is created. In this way each application 
uses its own subset (that may of course overlap). 

Thus in a preferred embodiment, using the Heaviside function and the subset 
selection, the goal is to create a certain m-bit binary secret C = (c, , c m ) e {0, 1} CT based on a, 
ie. property set I,. The secret C = (c, , c m ) can said to be feasible for a if there exist 
distinct indexes /, , ...,/ m such that i, e I x = I s (a) , for every j = 1, m, and 

\a tj >0 



Denote by C s {a) cz {0,l} m the set of all feasible secrets for a : 

C s (a)= fee {0,1}™ : Cis feasible for a} 
It is desired that C s (or) is as large as possible. Under normality assumptions, a t has a 
symmetric distribution. Hence if s, =H[oc i ), then 

P{s,=l\ \* { \>S)=P( Si =0\ H>*)=I 

In the previous section it has been shown that the expected number of 
significant components is equal to a certain fraction of n, sayyn. Moreover, the probability 
of a large deviation from the expected number is exponentially small. Since s, for each / such 
that a t > 8 is a symmetricaUy distributed Bernoulli random variable, it is expected that 
approximately one-half of s t 's is equal to 1, and approximately one-half of s t 's is equal to 0. 
Using similar exponential inequalities, it can be shown that any substantial deviations from 
the expected value of one-half, is exponentially un-probable. Hence, m (the length of the 
secret) can be chosen to be a certain fraction of the expected number of significant 
components, i.e. m = /,«, say y x = y/\Q . It can be shown that, with a large probability, a large 

portion of all 2 m secrets is feasible for a . Hence, for certain physical measurements of an 
object, with a large probability it can be guaranteed that a secret can be chosen from an 
extremely large set. Therefore, with a large probability the authentication protocol according 
to the invention will be sufficiently versatile. On the other hand, in the un-probable event that 
for a given biometric information there are only few feasible secrets, it is possible to generate 
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a secret for this particular biometric information, using another linear transformation, e.g., 
using a random orthonormal W. 

So, it is possible to select a subset a {j , giving the secret C, with Cj=H [a^ ) . 

The helper data W = W(X) can now be created by taking rows of V , with indexes 
5 i J9 j = i.e. W is a kxn matrix. This helper data is stored as part of the authentication 

data. 

Determining subset Ij for the first embodiment 

In the first described embodiment, Wean be chosen to a random matrix. 
10 Suppose that the measurements X are n-dimensional real vectors. During the enrolment 
phase, choose a random and orthonormal matrix W . Let <x=WY 9 now select components of a 
with sufficiently large absolute values. In principle, one should expect a large number of such 
coordinates. Using some (but not all!) of these coordinates, generate the secret 

C = (c 19 ...,c fc ) , where c k =H {oc ik ) . In other words, C —H(J¥Y)> where W is a kxn matrix, 

15 obtained from W by selecting rows i X9 .*i k . If W does not lead to a sufficient number of large 
components, another random matrix may be generated. 



Summary of the preferred embodiments 

Enrolment, as illustrated in Fig.2A 
20 (1) Get measurements^ = (J^,...,F /l )e R n of certain actual corresponding properties (such 

as biometrics) X = ( X x , X n ) of the object 

(2) Create robust properties from the property set Y, giving a set of robust properties J; 

o Perform transformation a= TY , where T sorts the vector components 
according to an estimated signal to noise ratio. 
25 o Select set I: Ii=Is(a) ={|aj| > 6}, where S is derived from a noise level in the 

measurements 

(3) Reduce the information: 

o Select subset of//; selection defines selection function W(X) that is a subset of 
the transformation r, thus the subset of selected robust properties is formed 
30 by: a tj =WY 
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o Generate secret by performing contraction on the subset: e.g. Cj = H(a tj ) 

(where H is the Heaviside function) giving a binary code word Cof length 
k<n. 

(4) Generate control value V, e.g. by using a collision resistant one-way hash function h 
V=h(C) 

(5) Store: W, V 

In one particular embodiment, W is a kxn matrix, 
andC=H(g(Y,W))=H(W*(r-m)) > where His the Heaviside function, m isavector 
(e.g. mean) known to the system The mean is average of each group of measurements being 
taken, e.g. if a fingerprint is measured several times, the mean is the average fingerprint (ie. 
averaged over all fingerprints). 

Hence, the total signal processing function G is given by G = H eg . To 
ensure the security of the authentication procedure, it is preferred to choose W so that the 
coordinates of C = G(Y y W) are independent, or at least, uncorrected, random variables. To 
ensure privacy, C is a binary vector (in the preferred embodiment created using the 
Heaviside function) , hence knowing the C itself will not give a good estimate of the 
biometric template. Moreover, by using the subset selection controlled by W, the dimension • 
of C can be made substantially smaller than the dimension of Y , effectively, a large part of 
the information about Y is not recorded. In the case, g(W,Y) =WY there are several 
attractive choices of the matrix W . For the first embodiment, W can be chosen as a random 
orthonormal transformation. Above a detailed description has been given for two preferred 
embodiments where W is a restriction of the Principle Component Transformation (PCT) to 
a specified k-dimensional subspace and W is a restriction of the Fischer transformation to a 
specified k-dimensional subspace, respectively. 

Authentication as illustrated in Fig.2B 

(1) GetJ^F 

(2) Get measurementsF = (j;,.. M 7 n ) e i?» Q f certain actual corresponding properties (such 
as biometrics) X = ( JSf, X n ) of the object 

(3) Reduce the information: 

o Determine subset Ij of robust properties: a t -WY 
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o Calculate secret by performing contraction: e.g. c. = Hioc^ ) (where H is the 

Heaviside function) giving a binary code word C of length k< tl 

(4) Calculate control value V\ e.g. by using a collision resistant one-way hash function h 
V'= h(C) 

(5) If there is a match against the retrieved control value V, the object is authenticated. 

It should be noted that the above-mentioned embodiments illustrate rather than 
limit the invention, and that those skilled in the art will be able to design many alternative 
embodiments without departing from the scope of the appended claims. In the claims, any 
reference signs placed between parentheses shall not be construed as limiting the claim. Use 
of the verb "comprise" and its conjugations does not exclude the presence of elements or 
steps other than those stated in a claim. The article "a" or "an" preceding an element does not 
exclude the presence of a plurality of such elements. The invention may be implemented by 
means of hardware comprising several distinct elements, and by means of a suitably 
programmed computer. In the device claim enumerating several means, several of these 
means may be embodied by one and the same item of hardware. The mere fact that certain 
measures are recited in mutually different dependent claims does not indicate that a 
combination of these measures cannot be used to advantage. 
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CLAIMS: 



1. A method of generating authentication data for authenticating a physical 
object; the method including: 

measuring a property set Y of the object using a measurement procedure; 

creating a property set / from the measured property set Y that meet a 
predetermined robustness criterion; 

creating a property set A from the property set / that includes less information 
on the actual properties than property set Y; 

generating a control value Via dependence on properties of the property set A 
and inserting the control value in the authentication data. 

2. A method as claimed in claim 1, wherein the step of creating the property set 
A includes performing a contracting transformation. 

3. A method as claimed in claim 2, wherein the contracting transformation 
transforms a property to a binary number representative of a sign of the property. 

4. A method as claimed in claim 1, wherein the step of creating the property set 
A includes selecting a subset of the property set /. 

5. A method as claimed in claim 4, including creating helper data J^for 
controlling the selection of the subset and inserting the helper data Win the authentication 
data. 



6. A method as claimed in claim 5, including creating unique helper data W for 

respective authentication applications. 

7- A method as described in claim 1 , wherein the predetermined robustness 

criterion is based on a signal to noise ratio of the measured properties and the step of creating 
the property set / includes performing a transformation r on the property set Y to create 
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disjunct property sets h and 7 2 where a signal to noise ratio of properties of 7, are estimated to 
be higher than a signal to noise ratio of properties of I 2 ; and using /, as the property set /. 

8. A method as claimed in claim 7, wherein the transformation T is a linear 

5 transformation that converts a vector representing the property set Y to a vector with 

components ck representing the set /, where each vector component cti is independent of the 
other vector components a, (j *i) and wherein the vector components are sorted according to 
an estimated signal to noise ratio. 

0 9 - A method as claimed in claim 7, including the step of creating the 

transformation r in dependence on a statistical property of the measurement procedure. 

10. A method as claimed in claim 9, wherein the statistical property includes a 
covariance matrix derived from estimated properties X of the object and a corresponding 

> statistical distribution F. 

11. A method as claimed in claim 7, including deriving a threshold from a noise 
level in the measured property set and assigning created properties with an absolute value 
larger than the threshold to set /i. 

12. A method as claimed in claim 1, wherein the step of creating the control value 
^includes performing a cryptographic function on properties of the property set A 

13. A method as claimed in claim 12, wherein the cryptographic function is a one- 
way function. 

14. A computer program product operative to cause a processor to perform the 
method of claim 1. 

15. A method of authenticating a physical object; the method including: 
measuring a property set 7 of the object using a measurement procedure; 
creating a property set / from the measured property set Y that meet a 

predetermined robustness criterion; 
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creating a property set A from the property set /that includes less information 
on the actual properties than property set Y; 

generating a control value V in dependence on properties of the property set 

A, 

retrieving a control value Kthat has heen generated for the physical object 
during an enrolment; and 

authenticating the physical object if there is a predetermined correspondence 
between the generating a control value V and the retrieved control value V. 

10 16 - A computer program product operative to cause a processor to perform the 

method of claim 15. 

17. A system (100) for authenticating a physical object (105); the system 

including an enrolment device (1 10), an authentication device (140), and a storage (130) for 
15 storing authentication data; 

the enrolment device (1 10) including: 

an input (1 12) for receiving a property set Y of the object measured 
using a measurement procedure; 

a processor (1 14) for creating a property set / from the measured 
property set Y that meet a predetermined robustness criterion; creating a property set .4 from 
the property set I that includes less information on the actual properties than property set Y; 
and generating a control value Via dependence on properties of the property set A; and 

an output (1 16) for supplying the control value to the storage as part 
of the authentication data; and 

25 the authentication device (120) including: 

an input (142) for receiving a property set Y of the object measured 
using a measurement procedure and for receiving a control value Ffrom the storage; 

a processor (144) for creating a property set / from the measured 
property set Y that meet a predetermined robustness criterion; for creating a property set ,4 
from the property set / that includes less information on the actual properties than property 
set Y; for generating a control value V in dependence on properties of the property set A ; and 
for authenticating the physical object if there is a predetermined correspondence between the 
generating a control value V and the retrieved control value V; and 
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an output (146) for issuing a signal indicating whether or not the 
physical object has been authenticated. 



18. An authentication device (140) for use in a system as claimed in claim 17; the 

5 authentication device including: 

an input (142) for receiving a property set Y of a physical object measured 
using a measurement procedure and for receiving a control value Kfrom a storage; 

a processor (144) for creating a property set / from the measured property set 
Y that meet a predetermined robustness criterion; for creating a property set A from the 
10 property set / that includes less information on the actual properties than property set Y; for 
generating a control value V 9 in dependence on properties of the property set A; and for 
authenticating the physical object if there is a predetermined correspondence between the 
generating a control value V 9 and the retrieved control value V\ and 

an output (146) for issuing a signal indicating whether or not the physical 
15 object has been authenticated. 
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ABSTRACT: 



A system for authenticating a physical object includes an enrolment device, ar 
authentication device, and a storage for storing authentication data. The enrolment device 
includes an input for receiving a property set Y of the object measured using a measurement 
procedure. A processor is used for creating a property set /from the measured property set Y 
that meet a predetermined robustness criterion. It then creating a property set A from the 
property set / that includes less information on the actual properties than property set Y t and 
finally generates a control value Vrn dependence on properties of the property set A An 
output is used for supplying the control value to the storage as part of the authentication data. 
The enrolment device operates in an analogous way. 

Fig.l 
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